diff --git a/.gitattributes b/.gitattributes
index 3569d634e..d8efbbfe8 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -1,2 +1,16 @@
* -text
+
+
+# Exclude build/test files from archive to reduce ZIP size for composer dist download
+/.github export-ignore
+/tests export-ignore
+/.editorconfig export-ignore
+/.gitattributes export-ignore
+/.gitignore export-ignore
+/.markdownlint.json export-ignore
+/.php-cs-fixer.dist.php export-ignore
+/CLA.md export-ignore
+/CONTRIBUTING.md export-ignore
+/codeception.dist.yml export-ignore
+/phpstan* export-ignore
diff --git a/.github/ci/files/.env b/.github/ci/files/.env
new file mode 100644
index 000000000..1b5934023
--- /dev/null
+++ b/.github/ci/files/.env
@@ -0,0 +1,2 @@
+APP_ENV=test
+APP_DEBUG=true
diff --git a/.github/ci/files/.my.cnf b/.github/ci/files/.my.cnf
new file mode 100644
index 000000000..b8cc4500d
--- /dev/null
+++ b/.github/ci/files/.my.cnf
@@ -0,0 +1,5 @@
+[client]
+host=127.0.0.1
+port=33006
+user=root
+password=
diff --git a/.github/ci/files/bin/console b/.github/ci/files/bin/console
new file mode 100644
index 000000000..b37ac8fbd
--- /dev/null
+++ b/.github/ci/files/bin/console
@@ -0,0 +1,46 @@
+#!/usr/bin/env php
+getParameterOption(['--env', '-e'], null, true)) {
+ putenv('APP_ENV='.$_SERVER['APP_ENV'] = $_ENV['APP_ENV'] = $env);
+}
+
+if ($input->hasParameterOption('--no-debug', true)) {
+ putenv('APP_DEBUG='.$_SERVER['APP_DEBUG'] = $_ENV['APP_DEBUG'] = '0');
+}
+
+/** @var \Pimcore\Kernel $kernel */
+$kernel = \Pimcore\Bootstrap::startupCli();
+$application = new \Pimcore\Console\Application($kernel);
+$application->run();
diff --git a/.github/ci/files/kernel/Kernel.php b/.github/ci/files/kernel/Kernel.php
new file mode 100644
index 000000000..c801b2773
--- /dev/null
+++ b/.github/ci/files/kernel/Kernel.php
@@ -0,0 +1,22 @@
+
+ Options -MultiViews
+
+
+# mime types
+AddType video/mp4 .mp4
+AddType video/webm .webm
+AddType image/jpeg .pjpeg
+
+Options +SymLinksIfOwnerMatch
+
+# Use UTF-8 encoding for anything served text/plain or text/html
+AddDefaultCharset utf-8
+
+RewriteEngine On
+
+
+
+ Header always unset X-Content-Type-Options
+
+
+
+# Determine the RewriteBase automatically and set it as environment variable.
+# If you are using Apache aliases to do mass virtual hosting or installed the
+# project in a subdirectory, the base path will be prepended to allow proper
+# resolution of the app.php file and to redirect to the correct URI. It will
+# work in environments without path prefix as well, providing a safe, one-size
+# fits all solution. But as you do not need it in this case, you can comment
+# the following 2 lines to eliminate the overhead.
+RewriteCond %{REQUEST_URI}::$1 ^(/.+)/(.*)::\2$
+RewriteRule ^(.*) - [E=BASE:%1]
+
+# Sets the HTTP_AUTHORIZATION header removed by Apache
+RewriteCond %{HTTP:Authorization} .
+RewriteRule ^ - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
+
+# Redirect to URI without front controller to prevent duplicate content
+# (with and without `/app.php`). Only do this redirect on the initial
+# rewrite by Apache and not on subsequent cycles. Otherwise we would get an
+# endless redirect loop (request -> rewrite to front controller ->
+# redirect -> request -> ...).
+# So in case you get a "too many redirects" error or you always get redirected
+# to the start page because your Apache does not expose the REDIRECT_STATUS
+# environment variable, you have 2 choices:
+# - disable this feature by commenting the following 2 lines or
+# - use Apache >= 2.3.9 and replace all L flags by END flags and remove the
+# following RewriteCond (best solution)
+RewriteCond %{ENV:REDIRECT_STATUS} ^$
+RewriteRule ^app\.php(?:/(.*)|$) %{ENV:BASE}/$1 [R=301,L]
+
+
+ RewriteCond %{REQUEST_URI} ^/(fpm|server)-(info|status|ping)
+ RewriteRule . - [L]
+
+
+# restrict access to dotfiles
+RewriteCond %{REQUEST_FILENAME} -d [OR]
+RewriteCond %{REQUEST_FILENAME} -l [OR]
+RewriteCond %{REQUEST_FILENAME} -f
+RewriteRule /\.|^\.(?!well-known/) - [F,L]
+
+# ASSETS: check if request method is GET (because of WebDAV) and if the requested file (asset) exists on the filesystem, if both match, deliver the asset directly
+RewriteCond %{REQUEST_METHOD} ^(GET|HEAD)
+RewriteCond %{DOCUMENT_ROOT}/var/assets%{REQUEST_URI} -f
+RewriteRule ^(.*)$ /var/assets%{REQUEST_URI} [PT,L]
+
+# Thumbnails
+RewriteCond %{REQUEST_URI} .*/(image|video)-thumb__[\d]+__.*
+RewriteCond %{DOCUMENT_ROOT}/var/tmp/%1-thumbnails%{REQUEST_URI} -f
+RewriteRule ^(.*)$ /var/tmp/%1-thumbnails%{REQUEST_URI} [PT,L]
+
+# cache-buster rule for scripts & stylesheets embedded using view helpers
+RewriteRule ^cache-buster\-[\d]+/(.*) $1 [PT,L]
+
+# If the requested filename exists, simply serve it.
+# We only want to let Apache serve files and not directories.
+RewriteCond %{REQUEST_FILENAME} -f
+RewriteRule ^ - [L]
+
+# Rewrite all other queries to the front controller.
+RewriteRule ^ %{ENV:BASE}/index_test.php [L]
+
+
+
+
+##########################################
+### OPTIONAL PERFORMANCE OPTIMIZATIONS ###
+##########################################
+
+
+ # Force compression for mangled headers.
+ # http://developer.yahoo.com/blogs/ydn/posts/2010/12/pushing-beyond-gzipping
+
+
+ SetEnvIfNoCase ^(Accept-EncodXng|X-cept-Encoding|X{15}|~{15}|-{15})$ ^((gzip|deflate)\s*,?\s*)+|[X~-]{4,13}$ HAVE_Accept-Encoding
+ RequestHeader append Accept-Encoding "gzip,deflate" env=HAVE_Accept-Encoding
+
+
+
+ # Compress all output labeled with one of the following MIME-types
+ # (for Apache versions below 2.3.7, you don't need to enable `mod_filter`
+ # and can remove the `` and `` lines
+ # as `AddOutputFilterByType` is still in the core directives).
+
+ AddOutputFilterByType DEFLATE application/atom+xml application/javascript application/json \
+ application/vnd.ms-fontobject application/x-font-ttf application/rss+xml \
+ application/x-web-app-manifest+json application/xhtml+xml \
+ application/xml font/opentype image/svg+xml image/x-icon \
+ text/css text/html text/plain text/x-component text/xml text/javascript
+
+
+
+
+ ExpiresActive on
+ ExpiresDefault "access plus 31536000 seconds"
+
+ # specific overrides
+ #ExpiresByType text/css "access plus 1 year"
+
+
+
+ # pimcore mod_pagespeed integration
+ # pimcore automatically disables mod_pagespeed in the following situations: debug-mode on, /admin, preview, editmode, ...
+ # if you want to disable pagespeed for specific actions in pimcore you can use $this->disableBrowserCache() in your action
+ RewriteCond %{REQUEST_URI} ^/(mod_)?pagespeed_(statistics|message|console|beacon|admin|global_admin)
+ RewriteRule . - [L]
+
+ ModPagespeed Off
+ AddOutputFilterByType MOD_PAGESPEED_OUTPUT_FILTER text/html
+ ModPagespeedModifyCachingHeaders off
+ ModPagespeedRewriteLevel PassThrough
+ # low risk filters
+ ModPagespeedEnableFilters remove_comments,recompress_images
+ # low and moderate filters, recommended filters, but can cause problems
+ ModPagespeedEnableFilters lazyload_images,extend_cache_images,inline_preview_images,sprite_images
+ ModPagespeedEnableFilters combine_css,rewrite_css,move_css_to_head,flatten_css_imports,extend_cache_css,prioritize_critical_css
+ ModPagespeedEnableFilters extend_cache_scripts,combine_javascript,canonicalize_javascript_libraries,rewrite_javascript
+ # high risk
+ #ModPagespeedEnableFilters defer_javascript,local_storage_cache
+
diff --git a/.github/ci/files/public/index_test.php b/.github/ci/files/public/index_test.php
new file mode 100644
index 000000000..c4daad55d
--- /dev/null
+++ b/.github/ci/files/public/index_test.php
@@ -0,0 +1,41 @@
+handle($request);
+$response->send();
+
+$kernel->terminate($request, $response);
diff --git a/.github/ci/files/templates/.gitkeep b/.github/ci/files/templates/.gitkeep
new file mode 100644
index 000000000..e69de29bb